OpenClaw's /pair approve Command: The Backdoor That Handed Attackers 85,000 Servers
Picture this: one command, typed in under a minute, flips a low-priv user into god-mode admin. OpenClaw CVE-2026-33579 exposed 85,000+ instances to instant takeover.
⚡ Key Takeaways
- CVE-2026-33579 allows instant admin takeover via /pair approve—no auth needed on 85k+ instances.
- Patch in 2026.3.28 adds checks, but systemic trust flaws demand full RBAC redesign.
- Assume compromise if unpatched: audit devices, logs, and rotate all creds immediately.
Worth sharing?
Get the best Developer Tools stories of the week in your inbox — no noise, no spam.
Originally reported by dev.to
Related Stories
AI Dev Tools
OpenClaw's Multi-Agent Fix: Escaping the Single-Agent Hallucination Trap
DevOps & Platform Eng
Containers: Just Processes, Kernel-Constrained
DevOps & Platform Eng
Docker for Beginners: Containers That Ship Code Like Cargo Ships
Open Source